Affected versions
Symfony versions >=6.3.0, <6.3.8 of the Symfony Webhook component are affected
by this security issue.
The issue has been fixed in Symfony 6.3.8.
Description
The error message in WebhookController returns unescaped user-submitted input.
Affected versions
Symfony versions >=5.4.21, <5.4.31, and >= 6.2.7, < 6.3.8 of the Symfony
Security HTTP component are affected by this security issue.
The issue has been fixed in Symfony 5.4.31, 6.3.8.
Affected versions
Symfony versions >=2.0.0,<4.4.51, >=5.0.0,<5.4.31, and =6.0.0,<6.3.8 of the
Symfony Twig Bridge are affected by this security issue.
The issue has been fixed in Symfony 4.4.51, 5.4.31, 6.3.8. All other versions are not maintained anymore.